Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31342e302f32342d3234203d3e20323730353737.roa
File:                     3138372e39342e31342e302f32342d3234203d3e20323730353737.roa (raw, json)
Hash identifier:          fWBay4hF04dSJqr/2Ss5EtG1LYvyhIH9I9BrRFburhQ=
Subject key identifier:   1B:B4:10:3D:0E:EE:BE:84:92:EA:95:4C:B9:2F:47:61:F2:08:9E:C5
Certificate issuer:       /CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
Certificate serial:       18DAFC5CFB73574A2586D56D46CBC9C5B8E37044
Authority key identifier: FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31342e302f32342d3234203d3e20323730353737.roa
Signing time:             Tue 22 Oct 2024 21:08:47 +0000
ROA not before:           Tue 22 Oct 2024 21:03:47 +0000
ROA not after:            Tue 21 Oct 2025 21:08:47 +0000
asID:                     270577
IP address blocks:        187.94.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:da:fc:5c:fb:73:57:4a:25:86:d5:6d:46:cb:c9:c5:b8:e3:70:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC63AAD64EEDF07C21337E1B0D2FD862211C3F61
        Validity
            Not Before: Oct 22 21:03:47 2024 GMT
            Not After : Oct 21 21:08:47 2025 GMT
        Subject: CN=1BB4103D0EEEBE8492EA954CB92F4761F2089EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:aa:cf:0f:fe:d0:f0:cc:f8:ea:4a:33:b1:
                    c1:31:e0:bc:6e:d7:2f:c4:e9:79:02:3d:42:18:04:
                    05:70:11:34:32:4d:a2:39:64:eb:30:b5:01:df:96:
                    98:1c:4b:6b:74:2d:6f:d5:50:f9:a9:06:ed:62:3c:
                    1f:77:8c:fe:7e:d1:b7:78:1d:ed:ea:2d:d6:a2:a4:
                    21:91:03:21:8b:2e:4c:b4:b0:80:d2:4b:ea:f1:fb:
                    19:d3:fc:49:60:da:7e:6a:c7:2f:25:d4:47:1b:44:
                    c5:c1:a2:ea:40:8a:0e:2e:5b:d0:a0:d5:1a:bb:bc:
                    0e:c8:9d:fc:57:c0:70:2e:0c:10:7c:be:0f:da:b9:
                    6c:55:d0:90:ce:58:3e:bb:cb:b4:0b:c6:7c:ac:33:
                    fe:f1:e0:4f:42:85:96:c3:58:55:a8:93:1b:28:0b:
                    fc:e9:b4:00:f7:c1:d4:7d:c9:a2:63:86:18:9b:e5:
                    4b:5d:d9:18:48:f7:b2:fe:ba:c6:4c:d3:d6:49:7d:
                    dd:0c:88:cd:8e:9e:25:db:75:60:64:da:a6:d7:ef:
                    ae:79:c3:18:0a:e5:97:bc:1d:df:94:2d:cd:4e:f0:
                    e7:4f:a7:12:58:4f:0e:4e:1c:37:59:dd:69:23:df:
                    85:34:2e:bd:ee:55:79:88:ab:5c:9c:ff:79:ec:3d:
                    85:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B4:10:3D:0E:EE:BE:84:92:EA:95:4C:B9:2F:47:61:F2:08:9E:C5
            X509v3 Authority Key Identifier:
                keyid:FC:63:AA:D6:4E:ED:F0:7C:21:33:7E:1B:0D:2F:D8:62:21:1C:3F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC63AAD64EEDF07C21337E1B0D2FD862211C3F61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/3138372e39342e31342e302f32342d3234203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:d2:e0:15:1a:07:d4:49:7b:8c:bc:ec:07:e8:37:50:9d:d0:
         e7:40:2c:2d:aa:c0:80:94:01:ba:0b:a3:ee:d0:cb:be:45:a1:
         ee:a9:83:ce:4d:39:68:db:bc:a3:03:7a:52:dc:47:4f:51:7a:
         55:b8:82:72:c0:61:81:5c:dc:27:6c:4a:12:14:2d:bf:c2:cb:
         30:b4:4f:c1:8a:3e:ff:bf:05:9d:0d:f5:03:81:7a:d2:73:97:
         45:c8:8c:1d:95:db:15:84:ae:1b:02:fb:15:bd:69:06:0a:a5:
         7f:b9:88:59:07:cd:3e:f9:0b:c2:15:5f:f3:b8:4b:a0:01:26:
         20:10:cf:14:5d:a9:79:55:8f:70:a1:df:51:11:88:ad:e8:f2:
         9a:80:3b:27:cd:90:f9:e4:2a:03:18:74:5a:ab:04:72:9e:49:
         c4:c8:30:74:09:af:db:68:04:bb:35:48:a5:29:44:5a:e3:e3:
         fb:e0:e1:27:15:14:5e:d1:02:eb:25:47:2b:bc:7f:4f:a2:d1:
         b8:44:27:93:75:4d:b0:ed:41:da:36:e4:cc:c5:74:7f:47:74:
         ec:b7:20:80:c7:88:7e:7b:47:aa:5a:d8:3d:a3:23:73:6e:54:
         b4:07:42:60:46:70:05:56:cc:c6:9c:01:5b:b1:3c:59:39:0e:
         3e:91:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:32:00 2024 by rpki-client on console-fra.rpki-client.org